CVE-2025-11837

8.1 highEPSS 1.5%

High (8.1) in qnap malware remover. EPSS 1.5% chance of exploitation in the next 30 days.

An improper control of generation of code vulnerability has been reported to affect Malware Remover. The remote attackers can then exploit the vulnerability to bypass protection mechanism. We have already fixed the vulnerability in the following version: Malware Remover 6.6.8.20251023 and later

Severity

CVSS 4.0

8.1 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 74% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2026-01-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

qnap:malware_remover

References

https://www.qnap.com/en/security-advisory/qsa-25-47

Check your stack JSON